Sign in
Menu
Sign up
Docs
Terraform modules for AWSNetworking & Edge

Terraform AWS VPN Gateway

Site to site VPN connections with customer gateways, VPN gateways or transit gateway attachments, tunnels, routing propagation, and encrypted connectivity between on premises networks and AWS.

Quick start

module "vpn-gateway" {
  source  = "iso27001.compliance.tf/terraform-aws-modules/vpn-gateway/aws"
  version = "~> 4.0"

  # ... your arguments here
}
module "vpn-gateway" {
  source  = "soc2.compliance.tf/terraform-aws-modules/vpn-gateway/aws"
  version = "~> 4.0"

  # ... your arguments here
}

This module on the compliance.tf registry lists its versions, inputs and outputs. The Get Started guide and Registry Endpoints cover authentication and how to customize the module for your requirements.

Migration from upstream

Already using terraform-aws-modules? Change only the source URL:

module "vpn-gateway" {
  source  = "terraform-aws-modules/vpn-gateway/aws"
  version = "~> 4.0"
}
module "vpn-gateway" {
  source  = "soc2.compliance.tf/terraform-aws-modules/vpn-gateway/aws"
  version = "~> 4.0"
}

Same arguments. Same outputs. Controls are checked at terraform plan. The Migration Guide has the step-by-step version.

Reversibility

No lock-in. Switch back by reverting the source URL:

module "vpn-gateway" {
  source  = "terraform-aws-modules/vpn-gateway/aws"
}

Run terraform init -upgrade. Terraform state is unchanged: same resource addresses, same provider, no compliance.tf-specific resources. Controls you already applied remain in AWS.

Controls enforced

Up to 1 controls are checked at terraform plan when this module comes from a compliance.tf endpoint. Which ones are active depends on the endpoint; see Framework coverage.

Mapped compliance frameworks

ClauseControls from this module
A.8.15 Logging
ClauseControls from this module
CC7.2: The entity monitors system components and the operation of those components for anomalies that are indicative of malicious acts, natural disasters, and errors affecting the entity's ability to meet its objectives; anomalies are analyzed to determine whether they represent security events.

Framework coverage

Which controls from this module are active under each framework endpoint. Your framework preferences choose the columns.

1 controls enforced with a source URL change.

Start free trialGet started

On this page

Ask AI about this

Help improve this page